$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft File: bX2AV2xLO-av9DH40yM49x_fAd0.mft (raw, json) Hash identifier: 4KCsZu6HNRmRwZKWoz1QUOD22b2ezBl4Mac8YP7pw7c= Subject key identifier: E1:11:6B:85:61:BD:AA:5D:44:2B:E5:66:C6:12:1D:08:EC:62:5D:EC Authority key identifier: 6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD Certificate issuer: /CN=A91FC1B8/serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Certificate serial: 0E35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft Manifest number: 0E2E Signing time: Fri 22 Nov 2024 17:43:44 +0000 Manifest this update: Fri 22 Nov 2024 17:43:44 +0000 Manifest next update: Fri 29 Nov 2024 17:43:44 +0000 Files and hashes: 1: bX2AV2xLO-av9DH40yM49x_fAd0.crl (hash: iE9W/vuURB49GufPNMAQgr0OHGfAvDdZeTRLTYgT9js=) 2: 4E150C0890FD11E98DB54881C4F9AE02.roa (hash: WbUUTzfSyCpyqPb3jZBov7io1LDDEMhW0G0g1zGhi5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3637 (0xe35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1B8/serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Validity Not Before: Nov 22 17:43:44 2024 GMT Not After : Nov 29 17:43:44 2024 GMT Subject: CN=6740c2d0-c8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:02:c9:36:60:7a:6e:6d:01:54:40:2e:cc: 20:78:2a:63:92:62:4e:03:9b:aa:05:a4:c5:db:30: 12:98:1d:70:b2:f0:4d:c7:51:e4:ba:71:1b:d2:a1: 6d:b2:bb:03:94:b7:c1:ee:db:06:b0:41:d8:6a:14: 23:22:fd:00:da:f9:67:c6:36:30:65:19:49:c4:00: 08:a8:17:16:60:b1:60:54:55:5f:69:5f:70:68:14: 02:d4:4d:af:b8:66:b9:06:59:ec:7e:cd:37:7d:f8: 46:04:89:69:2a:d8:c3:c7:d7:4c:63:77:83:6e:d9: f4:ba:f8:57:93:62:c9:41:bc:01:30:6e:f3:d6:56: f3:9f:7c:91:37:57:47:bb:93:a4:99:da:02:3b:b0: 3e:1e:58:bf:e8:fa:8a:e1:11:d7:b8:2f:06:f1:d8: 8a:da:af:56:d4:6a:09:53:2f:0f:9c:83:3e:45:9f: 33:fb:be:42:65:99:e4:e4:ce:a7:c3:33:aa:ae:ea: 85:73:dc:da:49:da:70:8c:66:a0:49:da:79:01:85: 58:c6:e7:6d:51:e5:da:39:39:52:90:94:30:90:42: 41:01:6b:80:f7:b1:40:96:cd:21:b7:7c:83:d5:e4: fc:ef:69:c8:df:72:39:56:bd:05:cf:a5:9b:42:cc: 03:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:11:6B:85:61:BD:AA:5D:44:2B:E5:66:C6:12:1D:08:EC:62:5D:EC X509v3 Authority Key Identifier: keyid:6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:6a:9b:58:0f:1b:40:d1:f7:9e:d8:96:d1:14:bf:6a:6a:fb: 7e:dc:52:98:5f:71:f2:51:38:b3:46:4d:c3:52:e4:d7:ad:1b: 07:88:7b:9f:50:44:d8:04:11:23:0c:4c:02:bd:8b:8f:7b:3b: 6b:6c:d9:2c:bd:87:17:86:e6:17:37:84:46:3e:b7:8e:c2:1d: 1a:19:cf:e3:f2:fa:cc:1a:da:ea:28:ff:8d:a7:50:69:28:95: 37:7c:f4:ba:08:e4:ff:61:01:ea:99:e1:6e:b6:94:92:4a:c2: 7a:b1:de:8d:81:65:27:29:94:6d:65:11:f4:30:da:32:d1:28: 95:1e:39:ac:6e:e4:31:da:b0:01:49:28:44:ac:60:91:78:5b: 73:49:46:20:3d:82:e7:c2:83:e8:3c:9e:66:8d:6c:5b:15:b9: d5:11:35:7e:c7:b6:ea:3d:63:ef:a9:ce:90:65:19:71:15:00: 30:66:4a:95:c1:7b:26:79:d5:28:ce:03:4a:00:16:ed:02:16: 4d:b0:51:00:f1:85:16:73:ab:6b:d2:57:34:d7:4a:47:2b:81: 8f:b7:74:0b:e8:97:76:e3:e6:4b:51:a8:a4:38:6b:4d:7c:60: bc:57:a9:ba:2a:91:58:b9:50:a3:30:78:57:55:35:97:26:20: bb:99:c0:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxQjgxMTAvBgNVBAUTKDZEN0Q4MDU3NkM0QjNCRTZBRkY0MzFGOEQzMjMzOEY3 MUZERjAxREQwHhcNMjQxMTIyMTc0MzQ0WhcNMjQxMTI5MTc0MzQ0WjAYMRYwFAYD VQQDEw02NzQwYzJkMC1jOGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbYCyTZgem5tAVRALswgeCpjkmJOA5uqBaTF2zASmB1wsvBNx1HkunEb0qFt srsDlLfB7tsGsEHYahQjIv0A2vlnxjYwZRlJxAAIqBcWYLFgVFVfaV9waBQC1E2v uGa5Blnsfs03ffhGBIlpKtjDx9dMY3eDbtn0uvhXk2LJQbwBMG7z1lbzn3yRN1dH u5OkmdoCO7A+Hli/6PqK4RHXuC8G8diK2q9W1GoJUy8PnIM+RZ8z+75CZZnk5M6n wzOqruqFc9zaSdpwjGagSdp5AYVYxudtUeXaOTlSkJQwkEJBAWuA97FAls0ht3yD 1eT872nI33I5Vr0Fz6WbQswDswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOERa4Vh vapdRCvlZsYSHQjsYl3sMB8GA1UdIwQYMBaAFG19gFdsSzvmr/Qx+NMjOPcf3wHd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFCOC9GQkRFOTlGQTkw RkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8tYXY5REg0MHlNNDl4X2ZB ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYMkFWMnhMTy1hdjlESDQweU00OXhfZkFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFCOC9GQkRFOTlGQTkwRkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8t YXY5REg0MHlNNDl4X2ZBZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBaptYDxtA0fee2JbRFL9qavt+3FKYX3HyUTizRk3DUuTXrRsHiHuf UETYBBEjDEwCvYuPeztrbNksvYcXhuYXN4RGPreOwh0aGc/j8vrMGtrqKP+Np1Bp KJU3fPS6COT/YQHqmeFutpSSSsJ6sd6NgWUnKZRtZRH0MNoy0SiVHjmsbuQx2rAB SShErGCReFtzSUYgPYLnwoPoPJ5mjWxbFbnVETV+x7bqPWPvqc6QZRlxFQAwZkqV wXsmedUozgNKABbtAhZNsFEA8YUWc6tr0lc010pHK4GPt3QL6Jd24+ZLUaikOGtN fGC8V6m6KpFYuVCjMHhXVTWXJiC7mcCw -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:23 2024 by rpki-client on console-ams.rpki-client.org